Buffer overflow in Schneider Electric Intouch Access Anywhere Server
CVE-2014-9190
Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrary code via a request for a filename that does not exist.
Vulnerability class: Buffer Overflow
EPSS: 0.061 (92.6th percentile) — read the EPSS interpretation.
Affected products
- Schneider Electric Intouch Access Anywhere Server — versions 11.0, 10.6
- Schneider-electric Wonderware_intouch_access_anywhere_server — versions 10.6, 11.0
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (x_refsource_CONFIRM)
- ics-cert@hq.dhs.gov (x_refsource_MISC)
- af854a3a-2127-422b-91ae-364da2661108 (Third Party Advisory, US Government Resource)